From 4120d470844965f292627648fc8e44ddb62c23f1 Mon Sep 17 00:00:00 2001
From: Julien Cristau <jcristau@mozilla.com>
Date: Thu, 24 Jul 2025 16:46:31 +0200
Subject: [PATCH] load-task: ensure .bashrc is readable by the worker user

The uid outside docker might not match the worker user in the container,
either due to namespaces or just not running as uid 1000, e.g. when
using podman I'm getting a root-owned 0600 .bashrc, meaning I can't
actually run exec-task.
---
 src/taskgraph/docker.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/taskgraph/docker.py b/src/taskgraph/docker.py
index 17db732e9..f9565e306 100644
--- a/src/taskgraph/docker.py
+++ b/src/taskgraph/docker.py
@@ -346,6 +346,7 @@ def load_task(task_id, remove=True, user=None):
 
         if task_command:
             initfile = tempfile.NamedTemporaryFile("w+", delete=False)
+            os.fchmod(initfile.fileno(), 0o644)
             initfile.write(
                 dedent(
                     f"""